Privacy Policy
Privacy Policy
Chandelure Pick complies with applicable privacy laws and processes only the minimum information needed to provide the website, embedded video playback, likes, and voting features.
Translation notice: This English version is provided for convenience. If it differs from the Korean version, the Korean version controls.
1. Data Controller and Privacy Contact
- Data controller
- Doyoung Kim
- Privacy officer
- Doyoung Kim
- Contact email
- privacy@chandelurepick.com
2. Data Processed, Purposes, and Retention
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Site access | IP address, access time, requested URL, User-Agent, error and security diagnostic information | Website delivery, troubleshooting, security, and abuse prevention | Korean Personal Information Protection Act, Article 15(1)(4) and (6) | Vercel Hobby runtime logs: 1 hour. No separate application access log is created. |
| Random pick session | Poll IDs viewed and selected in the current tab | Avoid repeated candidates in the same tab and show the selection count | Article 15(1)(4) | Until the current tab is closed. This data is not separately stored in the server database. |
| Vote completion cache | Random UID, Pokémon item identifier, Normal and Shiny completion flags, and check time | Show completion promptly on return visits and reduce repeated requests | Article 15(1)(4) | Stored in browser localStorage. Rechecked after 24 hours; entries older than 7 days are removed on the next visit. Cleared on account change, sign-out, or deletion. |
| YouTube video playback | IP address, User-Agent, requested URL and time, playback and device information, and cookies or local-storage information that Google may set | Deliver the selected Poké Ball effect video, playback quality, security, and abuse prevention | Article 15(1)(4) | According to Google’s Privacy Policy and YouTube service policies. Chandelure Pick does not separately store this information. |
| First participation and identification | Random UID created without registration, authentication time, session cookies and tokens, IP address and User-Agent used during authentication | Create and maintain a like and voting session without a login screen and prevent duplicate participation | Article 15(1)(4) | Anonymous accounts: 12 months after last participation or until direct deletion. Google accounts: until account deletion. Supabase Free logs: 1 day. Session cookies: until expiration or user deletion. |
| Update candidate reactions | UID, candidate identifier, like state, and time | Prevent duplicates, support cancellation, and aggregate interest | Article 15(1)(4) | Anonymous accounts: 12 months after last participation or direct deletion. Google accounts: until account deletion |
| Reports and suggestions | Google account UID, category, title, description, related page, writing language, submission and review times, processing status, and outcome | Receive and review reports, show outcomes, and optionally publish confirmed development | Article 15(1)(4) | Original report and author link are deleted with the account. Separately edited public update text and completed history remain without author information |
| Voting | UID, poll and option identifiers, voting/change/cancellation state and time | Apply, change, cancel, and aggregate votes | Article 15(1)(4) | Anonymous accounts: UID removed after 12 months without participation. Direct account deletion also removes the UID. Votes remain in totals in both cases. |
| Rate limiting | UID or UID+poll key, HMAC hash of IP address, request count, and time | Limit automated or excessive requests | Article 15(1)(6) | Deleted hourly after 48 hours without an update |
| Abuse events | Event type, UID/UID+poll/IP-hash key, severity, poll/count/limit metadata, and creation time | Detect repeated rate-limit violations and respond to security incidents | Article 15(1)(6) | Deleted hourly after 30 days |
| Operations statistics | Daily database size and total counts of accounts, votes, and vote events; no identifier, IP address, or individual activity | Monitor service activity and storage growth | Aggregated values without personal data | Updated daily and automatically deleted after 90 days |
| Email inquiries | Sender email address and display name, message, attachments, and send/receive times | Receive and answer inquiries | Article 15(1)(4) | 3 months after the inquiry is closed |
The service does not collect phone numbers, precise location, advertising identifiers, or browser fingerprints. Email, name, and photo received through Google sign-in may be processed in Supabase Auth; they are not copied into an application profile. We display only your verified email on My page and account settings to identify your signed-in account, without separately storing it.
Chandelure Pick does not store raw IP addresses in its application database. Hosting, authentication, and security providers may temporarily process raw IP addresses in their own logs.
Optional Google sign-in and record transfer
Google sign-in is optional; anonymous participation remains available. Google and Supabase Auth process your Google account identifier, email, basic profile, and authentication session for sign-in. Google accounts and linked participation are retained until account deletion. Google's own processing follows its privacy policy.
The application database stores UIDs and participation/security records, without separately storing or using Google provider tokens. Transfer requests temporarily store UIDs and a random token hash, expire after 30 minutes, and are cleaned up every five minutes. Successful transfers immediately remove the source-to-target link. A source UID may remain in a deletion retry queue until cleanup succeeds.
In addition to session cookies, cp_auth_flow, cp_auth_merge, and cp_auth_return are essential cookies used for authentication checks, record transfer, and returning to the previous page for up to 30 minutes. Anonymous use does not initiate Google sign-in transfers.
3. Disclosure to Third Parties
Chandelure Pick does not sell personal data and does not disclose it to third parties except through the processing and international transfers described below or where required by law.
Data may be provided within the scope permitted by law when requested through lawful process by a court or investigative authority.
4. Service Providers and International Transfers
We use the providers below to operate the service. Their roles may include processing on our behalf and processing for their own legitimate purposes.
| Recipient and contact | Countries | Data | Timing and method | Purpose | Retention |
|---|---|---|---|---|---|
| Vercel Inc. privacy@vercel.com · Policy | Seoul, South Korea for functions, the United States, and countries where Vercel or subprocessors operate | IP address, User-Agent, requested URL and time, errors, and server request data | Transferred over HTTPS during site and API requests | Hosting, server execution, static image delivery, security, and troubleshooting | Operator-visible Hobby runtime logs: 1 hour. Other data: as required by service agreements and Vercel policy. |
| Supabase, Inc. privacy@supabase.io · Policy | Mumbai, India (ap-south-1 primary storage), the United States, and countries where Supabase or subprocessors operate | UID, Google account identifier/email/basic profile when signing in, authentication logs and session information, like/vote/change/cancellation records, IP hashes, and security records | Transferred over HTTPS during authentication, participation, lookup, and deletion | Authentication, database storage, likes, voting, deletion, and security | Anonymous UID-linked data: 12 months after last participation or direct deletion. Google UID-linked data: until account deletion. Votes remain without UIDs after account removal. Free API and database logs: 1 day. |
| Cloudflare, Inc. Policy | United States and countries where Cloudflare or subprocessors operate | Sender email and display name, recipient, message and attachments, send/receive times, and routing information | Transferred through internet email when you contact a Chandelure Pick domain address | Email receipt, spam and security processing, and forwarding to a dedicated Gmail account | As needed to provide Cloudflare services, maintain security, and meet legal obligations |
| Plus Five Five, Inc. (Resend) support@resend.com · Policy | United States and countries where subprocessors operate | Administrator link containing a report ID, operator recipient address, send time and delivery information. Original text and author email are excluded. | Transferred over HTTPS by the server when a report or suggestion is submitted | Notify the operator about new submissions | Processed during the service agreement; customer data is deleted within 90 days after termination. |
| Google LLC Policy | United States and countries where Google servers operate | For Google sign-in: account identifier, email, basic profile, and authentication information. For video playback: IP address, User-Agent, requested URL and time, playback/device information, and Google storage information. For email: sender address/name, message, attachments, times, and replies | Transferred over HTTPS when you choose Google sign-in, YouTube playback or an effect preview, or through internet email when you contact us | Google sign-in; YouTube embedded-video delivery, security and operation; receipt, retention, and response to inquiries | Google sign-in and YouTube information follow Google policy. Email is deleted by the operator 3 months after closure; Gmail trash is deleted after 30 days. |
If you submit a report or suggestion, its category, original text, related page, processing status, outcome, and your Google account UID are sent to and stored by Supabase.
You may decline international transfers by not using the relevant service. Refusing Vercel transfer makes site access impractical; refusing Supabase transfer prevents voting and reports or suggestions. To avoid transfer of notification information to Resend, do not submit a report or suggestion. To avoid transfer of video information to Google, do not press a video play button or open an external video link. To avoid email transfer through Cloudflare and Google, use the direct deletion screen provided for this browser instead of emailing us.
5. Cookies and Automatic Collection
After your first vote, essential cookies maintain a Supabase session; Google sign-in also uses session cookies. Chandelure Pick does not use its own advertising, personalized-marketing cookies, or web analytics.
When you choose Korean or English from the language menu, the essential cp_locale cookie stores only that language code for one year. Deleting it makes the site follow your browser language again on the next visit.
Random Pick stores poll IDs viewed and selected in the current tab in browser sessionStorage. They are used only to prevent repeated candidates and show the selection count, are not separately stored on the server for analytics, and are deleted by the browser when the tab closes.
Vote completion marks store only the UID, item identifiers, Normal and Shiny completion flags, and check times in browser localStorage. Entries are reused for up to 24 hours, checked again against the server, and entries older than 7 days are removed on the next visit. The cache is cleared on account changes, sign-out, or deletion; it contains no email or selected Poké Ball.
The Poké Ball Effects page does not load the YouTube player before you press play. On voting screens, choosing an effect preview opens and automatically plays the player. In both cases it connects to the privacy-enhanced domain (youtube-nocookie.com), and Google may use cookies or local storage to deliver and secure the video or remember playback state.
You can delete or block cookies in your browser. Doing so, or using private browsing or another browser, may prevent us from recognizing the prior UID or votes and may create a new anonymous user.
6. Data Deletion
When the retention purpose is complete or the service ends, electronic records are deleted using methods intended to prevent recovery. Records required by law are separated and retained for the required period.
Google users can delete their account from the account menu. Anonymous users can use the direct deletion screen in the same browser or contact the privacy email above. Direct deletion removes the account, historical update reactions, original reports and suggestions, UID-based security records, and session cookies. Separately edited public update text and completed history remain without author information. Votes and vote events have their UIDs removed, while votes remain anonymously in totals. Anonymous accounts inactive for 12 months are handled the same way. Daily total-count snapshots from earlier dates contain no individual identifiers and are kept for up to 90 days.
7. Your Rights and Rights of Legal Representatives
You or your legal representative may request access, correction, deletion, suspension of processing, or withdrawal of consent. We will verify the requester and respond within the period required by applicable law.
For anonymous records we may need the same browser session or limited participation information. For Google account records we verify the signed-in account. We will not disclose or delete another user’s data when it cannot be verified.
8. Security Measures
- HTTPS encryption and separation of server-only secrets
- Database RLS, least privilege, and private schemas
- Rate limiting with secret-key HMAC hashes instead of raw IP storage
- UID- and IP-based limits and repeated-violation detection
- No application logging of individual like/vote details or authentication tokens
9. Remedies
Contact the Chandelure Pick privacy officer first for privacy questions or rights requests. You may also contact the following Korean authorities.
- Privacy Infringement Report Center: 118 within Korea
- Personal Information Dispute Mediation Committee: +82-1833-6972
10. Changes to This Policy
If laws, service features, or external processors change, we will publish the changes and effective date on this page. Material changes affecting user rights will receive additional notice before taking effect.
Published and effective: October 15, 2026